The roadwarriors carol and dave set up a connection each to gateway moon. Both carol and dave request a virtual IP via the IKE Mode Config protocol by using the leftsourceip=%modeconfig parameter. After setting up an IPsec SA to reach the hosts alice and venus, respectively, both roadwarriors set up a second IPsec SA to venus and alice, respectively, inheriting the virtual IP address from the previous Mode Config negotiation.